摘自sfilter:
WCHAR buffer[MAX_DEVNAME_LENGTH];
PUNICODE_STRING storageDriverName;
ULONG returnedLength;
///
storageDriverName = (PUNICODE_STRING) buffer;//这个格式不常见
RtlInitEmptyUnicodeString( storageDriverName,
Add2Ptr( storageDriverName, sizeof( UNICODE_STRING ) ),
sizeof( buffer ) - sizeof( UNICODE_STRING ) );
status = ObQueryNameString( StorageStackDeviceObject,//StorageStackDeviceObject要查的设备
(POBJECT_NAME_INFORMATION)storageDriverName,
storageDriverName->MaximumLength,
&returnedLength );
if (!NT_SUCCESS( status )) {
return status;
}
很有用的一段代码是说